PowerExt Account

What it stores

• Your profile: email address, whether it's verified, and your name.
• How you sign in: a salted hash of your password (never the password itself), any passkeys you add, and any two-factor authentication you set up.
• Google sign-in: if you choose "Continue with Google", Google tells us your Google account id, email address, name and profile picture. Each time you sign in this way we update the name and picture from Google. We don't get access to your Gmail, contacts or anything else in your Google account.
• Sign-in history: when you signed in, and the browser and IP address used, so we can spot unusual sign-ins and lock an account after repeated wrong passwords.

What it shares with our apps

When you sign in to Wander or Tandem, PowerExt Account tells the app a stable account id, your verified email address and your name. It doesn't share your password, passkeys or sign-in history.

Who else processes it

• Resend sends the emails PowerExt Account sends you, such as verification codes and password resets, from [email protected].
• Google, only if you sign in with Google, under Google's own privacy policy.
• Hetzner (hosting) and Cloudflare (network and backups), as described in the overview.

Deleting your account

Email [email protected] from your account's address and we'll delete your PowerExt Account. Deleting it doesn't delete your data inside Wander or Tandem, because each app keeps its own. Delete those as their policies explain, before or at the same time.